This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZMvxuYZ3LwZT_m4RdN-q5OaRIM.roa File: nZMvxuYZ3LwZT_m4RdN-q5OaRIM.roa (raw, json) Hash identifier: rKC8r+l5jNoN7+Y2oXULGWIWDvQ5N1CW0w5NNJRRdp8= Subject key identifier: 9D:93:2F:C6:E6:19:DC:BC:19:4F:F9:B8:45:D3:7E:AB:93:9A:44:83 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE56C661DDF6B425955E784090DB28 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZMvxuYZ3LwZT_m4RdN-q5OaRIM.roa Signing time: Fri 02 Jan 2026 04:19:13 +0000 ROA not before: Fri 02 Jan 2026 04:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43359 IP address blocks: 79.172.239.0/24 maxlen: 24 79.172.252.0/24 maxlen: 24 87.229.68.0/24 maxlen: 24 87.229.76.0/24 maxlen: 24 178.238.208.0/24 maxlen: 24 178.238.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:56:c6:61:dd:f6:b4:25:95:5e:78:40:90:db:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d932fc6e619dcbc194ff9b845d37eab939a4483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:31:db:b7:02:7e:ca:10:eb:87:a8:87:ee:82: a8:df:d9:c4:91:96:9f:00:ed:d6:1f:d5:54:5e:08: 58:1f:38:00:a9:e9:11:6e:df:0e:4c:b4:27:3b:9c: 16:91:a4:44:e9:d5:9a:b9:e9:75:d3:d2:b9:b5:db: 93:e9:b1:76:ea:a6:3c:fa:ad:de:b8:39:6f:4e:0a: 54:bb:e4:b4:34:7f:1a:c9:0f:4c:e9:3a:de:57:9a: 97:67:7f:36:6a:64:04:ef:32:64:05:4d:15:d2:3b: 87:c5:4b:55:55:dc:76:ee:27:7c:d9:d1:05:4f:b5: bb:66:c6:a7:f2:d1:03:d9:cc:ef:4b:45:4f:91:96: cb:25:a2:97:c2:8d:5c:bb:25:16:63:bc:0f:d9:d4: a4:32:91:50:e4:be:49:43:47:f0:cd:7b:6d:b2:66: 92:48:74:80:23:0d:fb:b0:0f:a3:45:14:49:29:0a: c3:4b:38:dd:18:d0:87:87:1c:93:f6:05:34:dc:ee: 64:e4:a2:e6:ff:b0:f3:da:01:7c:c4:08:e6:0c:56: fa:e3:14:83:f0:d2:e5:7a:a3:5e:05:81:ca:fa:e2: ff:b9:f9:37:a1:d9:bb:93:1e:e4:81:2b:aa:82:42: 30:04:cf:1a:f0:08:ba:cf:d5:fd:64:21:77:14:65: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:93:2F:C6:E6:19:DC:BC:19:4F:F9:B8:45:D3:7E:AB:93:9A:44:83 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/nZMvxuYZ3LwZT_m4RdN-q5OaRIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.239.0/24 79.172.252.0/24 87.229.68.0/24 87.229.76.0/24 178.238.208.0/24 178.238.222.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:72:f9:a3:ac:49:8b:a2:cc:48:65:cf:f4:76:58:a4:03:64: c2:cc:40:15:49:1b:e6:d5:f8:d9:e3:cc:e3:42:d8:00:03:95: 1b:35:89:f8:67:1f:15:05:23:33:b7:18:6d:98:09:e6:0b:68: 7e:76:4b:43:86:b5:37:76:0a:40:16:d2:ff:f4:92:c1:15:1f: d0:e5:51:18:6c:0c:4f:93:0d:86:99:3d:60:9d:7e:9c:0f:4f: a2:a7:91:bf:7f:8f:24:72:64:62:d9:4f:51:89:e0:6d:2e:8a: e5:1f:c9:75:8a:3b:2b:fd:0e:4f:6d:17:9e:84:2c:ab:d1:12: 1d:25:e6:f3:1e:c8:b5:b9:7e:69:06:2f:70:cb:cd:f5:11:b7: 83:3f:5f:25:64:d7:31:73:c2:ee:f1:83:67:67:5d:3f:e3:c8: 42:62:89:a9:85:ee:fd:5d:7b:86:7f:d3:fa:83:4c:56:ac:ae: fe:19:0c:12:3c:11:a8:df:52:00:a0:8b:e8:a7:c7:62:b6:25: 08:53:8e:24:67:6d:e9:80:7e:e6:3a:c3:2d:bf:4c:88:cc:1e: 0d:aa:f9:d4:a8:c3:c4:65:0f:c2:75:a3:5b:0a:71:57:3a:55: fe:67:7f:20:00:5c:7b:ab:60:74:55:21:52:3e:df:29:98:9a: c1:f9:31:6e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt87lbGYd32tCWVXnhAkNsoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDkzMmZjNmU2MTlkY2JjMTk0ZmY5Yjg0NWQzN2VhYjkzOWE0NDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHbtwJ+yhDrh6iH7oKo39nEkZaf AO3WH9VUXghYHzgAqekRbt8OTLQnO5wWkaRE6dWauel109K5tduT6bF26qY8+q3e uDlvTgpUu+S0NH8ayQ9M6TreV5qXZ382amQE7zJkBU0V0juHxUtVVdx27id82dEF T7W7Zsan8tED2czvS0VPkZbLJaKXwo1cuyUWY7wP2dSkMpFQ5L5JQ0fwzXttsmaS SHSAIw37sA+jRRRJKQrDSzjdGNCHhxyT9gU03O5k5KLm/7Dz2gF8xAjmDFb64xSD 8NLleqNeBYHK+uL/ufk3odm7kx7kgSuqgkIwBM8a8Ai6z9X9ZCF3FGW1twIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJ2TL8bmGdy8GU/5uEXTfquTmkSDMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvblpNdnh1WVozTHdaVF9tNFJkTi1xNU9hUklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAT6zvAwQA T6z8AwQAV+VEAwQAV+VMAwQAsu7QAwQAsu7eMA0GCSqGSIb3DQEBCwUAA4IBAQCN cvmjrEmLosxIZc/0dlikA2TCzEAVSRvm1fjZ48zjQtgAA5UbNYn4Zx8VBSMztxht mAnmC2h+dktDhrU3dgpAFtL/9JLBFR/Q5VEYbAxPkw2GmT1gnX6cD0+ip5G/f48k cmRi2U9RieBtLorlH8l1ijsr/Q5PbReehCyr0RIdJebzHsi1uX5pBi9wy831EbeD P18lZNcxc8Lu8YNnZ10/48hCYomphe79XXuGf9P6g0xWrK7+GQwSPBGo31IAoIvo p8ditiUIU44kZ23pgH7mOsMtv0yIzB4NqvnUqMPEZQ/CdaNbCnFXOlX+Z38gAFx7 q2B0VSFSPt8pmJrB+TFu -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:59 2026 by rpki-client